Input Validation Flaw in Axis Device's ACAP Configuration

CVE-2026-0802

What is CVE-2026-0802?

A security vulnerability exists in the ACAP configuration of Axis devices due to inadequate input validation. This weakness could permit command injection attacks, enhancing the potential for privilege escalation. The risk materializes if the Axis device settings allow for unauthenticated installation of unsigned ACAP applications. Attackers may leverage social engineering tactics to persuade users into installing malicious ACAP applications, thereby compromising device security. It is crucial for users to configure their devices securely and remain vigilant against such threats.

References